Merge pull request #961 from Vafilor/feat/remove.community.restrictions

fix: remove namespace creation restriction

Author: Vafilor

db/yaml/workspaces/cvat_1_6_0/20211028205201.yaml

@@ -1,5 +1,5 @@
 metadata:
-  name: CVAT
+  name: CVAT_1.6.0
   kind: Workspace
   version: 20211028205201
   action: create

manifest/abs/deployment.json

@@ -0,0 +1,63 @@
+{
+  "apiVersion": "apps/v1",
+  "kind": "Deployment",
+  "metadata": {
+    "name": "minio-gateway",
+    "namespace": "$(applicationDefaultNamespace)"
+  },
+  "spec": {
+    "replicas": 1,
+    "selector": {
+      "matchLabels": {
+        "app": "minio-gateway"
+      }
+    },
+    "template": {
+      "metadata": {
+        "labels": {
+          "app": "minio-gateway"
+        },
+        "annotations": {
+          "sidecar.istio.io/inject": "false"
+        }
+      },
+      "spec": {
+        "containers": [
+          {
+            "name": "minio-gateway",
+            "image": "minio/minio:RELEASE.2021-06-17T00-10-46Z.hotfix.49f6035b1",
+            "args": [
+                "gateway",
+                "azure"
+            ],
+            "env": [
+              {
+                "name": "MINIO_ACCESS_KEY",
+                "valueFrom": {
+                  "secretKeyRef": {
+                    "name": "onepanel",
+                    "key": "artifactRepositoryS3AccessKey"
+                  }
+                }
+              },
+              {
+                "name": "MINIO_SECRET_KEY",
+                "valueFrom": {
+                  "secretKeyRef": {
+                    "name": "onepanel",
+                    "key": "artifactRepositoryS3SecretKey"
+                  }
+                }
+              }
+            ],
+            "ports": [
+              {
+                "containerPort": 9000
+              }
+            ]
+          }
+        ]
+      }
+    }
+  }
+}

manifest/abs/service.json

@@ -0,0 +1,19 @@
+{
+  "apiVersion": "v1",
+  "kind": "Service",
+  "metadata": {
+    "name": "minio-gateway",
+    "namespace": "$(applicationDefaultNamespace)"
+  },
+  "spec": {
+    "selector": {
+      "app": "minio-gateway"
+    },
+    "ports": [
+      {
+        "port": 9000,
+        "targetPort": 9000
+      }
+    ]
+  }
+}

manifest/clusterrolebinding-models.json

@@ -0,0 +1,19 @@
+{
+  "apiVersion": "rbac.authorization.k8s.io/v1",
+  "kind": "ClusterRoleBinding",
+  "metadata": {
+    "name": "onepanel-kfserving-$(applicationDefaultNamespace)"
+  },
+  "subjects": [
+    {
+      "kind": "ServiceAccount",
+      "name": "$(applicationDefaultNamespace)",
+      "namespace": "$(applicationDefaultNamespace)"
+    }
+  ],
+  "roleRef": {
+    "apiGroup": "rbac.authorization.k8s.io",
+    "kind": "ClusterRole",
+    "name": "onepanel-models"
+  }
+}

manifest/clusterrolebinding-onepanel-namespaces-defaultnamespace.json

@@ -0,0 +1,22 @@
+{
+  "apiVersion": "rbac.authorization.k8s.io/v1beta1",
+  "kind": "ClusterRoleBinding",
+  "metadata": {
+    "labels": {
+      "app": "onepanel"
+    },
+    "name": "onepanel-namespaces"
+  },
+  "roleRef": {
+    "apiGroup": "rbac.authorization.k8s.io",
+    "kind": "ClusterRole",
+    "name": "onepanel-namespaces"
+  },
+  "subjects": [
+    {
+      "kind": "ServiceAccount",
+      "name": "$(applicationDefaultNamespace)",
+      "namespace": "$(applicationDefaultNamespace)"
+    }
+  ]
+}

manifest/configmap-onepanel-defaultnamespace.json

@@ -0,0 +1,11 @@
+{
+  "apiVersion": "v1",
+  "kind": "ConfigMap",
+  "metadata": {
+    "name": "onepanel",
+    "namespace": "$(applicationDefaultNamespace)"
+  },
+  "data": {
+    "artifactRepository": "archiveLogs: true\n$(artifactRepositoryProvider)\n"
+  }
+}

manifest/gcs/deployment.json

@@ -0,0 +1,83 @@
+{
+  "apiVersion": "apps/v1",
+  "kind": "Deployment",
+  "metadata": {
+    "name": "minio-gateway",
+    "namespace": "$(applicationDefaultNamespace)"
+  },
+  "spec": {
+    "replicas": 1,
+    "selector": {
+      "matchLabels": {
+        "app": "minio-gateway"
+      }
+    },
+    "template": {
+      "metadata": {
+        "labels": {
+          "app": "minio-gateway"
+        },
+        "annotations": {
+          "sidecar.istio.io/inject": "false"
+        }
+      },
+      "spec": {
+        "containers": [
+          {
+            "name": "minio-gateway",
+            "image": "minio/minio:RELEASE.2021-06-17T00-10-46Z.hotfix.49f6035b1",
+            "volumeMounts": [
+              {
+                "name": "gcs-credentials",
+                "mountPath": "/etc/gcs",
+                "readOnly": true
+              }
+            ],
+            "args": [
+                "gateway",
+                "gcs"
+            ],
+            "env": [
+              {
+                "name": "MINIO_ACCESS_KEY",
+                "valueFrom": {
+                  "secretKeyRef": {
+                    "name": "onepanel",
+                    "key": "artifactRepositoryS3AccessKey"
+                  }
+                }
+              },
+              {
+                "name": "MINIO_SECRET_KEY",
+                "valueFrom": {
+                  "secretKeyRef": {
+                    "name": "onepanel",
+                    "key": "artifactRepositoryS3SecretKey"
+                  }
+                }
+              },
+              {
+                "name": "GOOGLE_APPLICATION_CREDENTIALS",
+                "value": "/etc/gcs/credentials.json"
+              }
+            ]
+          }
+        ],
+        "volumes": [
+          {
+            "name": "gcs-credentials",
+            "projected": {
+              "sources": [
+                {
+                  "secret": {
+                    "name": "artifact-repository-gcs-credentials"
+                  }
+                }
+              ]
+            }
+          }
+        ]
+      }
+    }
+  }
+}

manifest/gcs/service.json

@@ -0,0 +1,19 @@
+{
+  "apiVersion": "v1",
+  "kind": "Service",
+  "metadata": {
+    "name": "minio-gateway",
+    "namespace": "$(applicationDefaultNamespace)"
+  },
+  "spec": {
+    "selector": {
+      "app": "minio-gateway"
+    },
+    "ports": [
+      {
+        "port": 9000,
+        "targetPort": 9000
+      }
+    ]
+  }
+}

manifest/kfserving/secret.json

@@ -0,0 +1,19 @@
+{
+  "apiVersion": "v1",
+  "kind": "Secret",
+  "metadata": {
+    "name": "kfserving-storage",
+    "namespace": "$(applicationDefaultNamespace)",
+    "annotations": {
+      "serving.kubeflow.org/s3-endpoint": "$(artifactRepositoryS3Endpoint)",
+      "serving.kubeflow.org/s3-usehttps": "0",
+      "serving.kubeflow.org/s3-region": "$(artifactRepositoryS3Region)",
+      "serving.kubeflow.org/s3-useanoncredential": "false"
+    }
+  },
+  "type": "Opaque",
+  "data": {
+    "AWS_ACCESS_KEY_ID": "$(artifactRepositoryS3AccessKey)",
+    "AWS_SECRET_ACCESS_KEY": "$(artifactRepositoryS3SecretKey)"
+  }
+}

manifest/networkpolicy-onepanel-defaultnamespace.json

@@ -0,0 +1,41 @@
+{
+  "apiVersion": "networking.k8s.io/v1",
+  "kind": "NetworkPolicy",
+  "metadata": {
+    "labels": {
+      "app": "onepanel"
+    },
+    "name": "onepanel",
+    "namespace": "$(applicationDefaultNamespace)"
+  },
+  "spec": {
+    "egress": [
+      {
+        "to": [
+          {
+            "ipBlock": {
+              "cidr": "0.0.0.0/0",
+              "except": [
+                  "169.254.169.254/32"
+              ]
+            }
+          }
+        ]
+      }
+    ],
+    "ingress": [
+      {
+        "from": [
+          {
+            "namespaceSelector": {
+              "matchLabels": {
+                "app.kubernetes.io/part-of": "onepanel"
+              }
+            }
+          }
+        ]
+      }
+    ],
+    "podSelector": {}
+  }
+}